Selection of a security edge protection proxy

Abstract

There is provided an apparatus comprising at least one processor; and at least one memory storing instructions that, when executed by the at least one processor, cause the apparatus to perform at least: receiving from at least one security edge protection proxy, SEPP, a registration message indicative of at least: at least one remote public land mobile network, PLMN, and/or at least one remote stand-alone non-public network, SNPN, the at least one SEPP is connected to; at least one agreed interface purpose per remote PLMN and/or remote SNPN the at least one SEPP is connected to, wherein the interface purpose is a purpose of intended usage of a connection over an inter-network interface; receiving a discovery request for a SEPP, which is configured to support connecting to a target PLMN or SNPN for interface purpose or interface purposes specified in the discovery request; selecting, among the at least one SEPP, at least one SEPP configured to support connecting to the target PLMN or target SNPN for the interface purpose or interface purposes specified in the discovery request; and transmitting, in response to the discovery request, information on the selected at least one SEPP.